CVE-2024-2747 is a High severity (CVSS 7.8) unquoted search path flaw in Schneider Electric Easergy Studio version 9.3.3 and earlier. A valid local user can plant a file and gain higher privileges after a reboot. Version 9.3.4 and later contains the fix, so install the latest release.
What's affected
- Product: Schneider Electric Easergy Studio, a software tool for configuring, monitoring and managing control devices.
- Affected: version 9.3.3 and prior.
- Fixed: version 9.3.4 and later. The advisory says the fix shipped in December 2022 and recommends the latest available version.
- Weakness: CWE-428.
- Access needed: local, low privilege (CVSS vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
The advisory is Schneider notice SEVD-2024-100-01, dated 9 April 2024. The NVD record shows the CVE as published on 12 June 2024.
How to check if you're exposed
This is desktop engineering software, so check each workstation that has it installed.
- Open Easergy Studio and read the version from its About screen, or look in Windows Settings under Installed apps.
- From a command prompt you can list installed products with
wmic product where "name like '%Easergy%'" get name,versionon systems where wmic is still present. - Any version at or below 9.3.3 is affected.
If you manage many engineering laptops, use your software inventory to find every install, including machines that are rarely online.
What to do now
- Inventory every machine with Easergy Studio installed.
- Upgrade each one to 9.3.4 or later, preferably the latest release from the Schneider download page named in the advisory.
- Test the upgrade in a development environment or on an offline machine first, as Schneider recommends.
- Keep control and safety networks behind firewalls and isolated from the business network, as the advisory advises.
- Subscribe to Schneider Electric security notifications so later notices reach you.
Why it matters
An unquoted search path happens on Windows when a service or program path containing spaces is not wrapped in quotes. Windows may try shorter path prefixes first, so a file planted earlier in the path can run in place of the real program.
Because the planted file can run at boot with the service's privileges, a low privileged local user may gain much higher access.
The advisory describes the risk as privilege escalation when a valid user replaces a trusted file name and reboots the machine. That makes it a local issue: an attacker already needs an account on the workstation. The danger is on shared engineering machines, where a low privileged user could gain control of a system that talks to protection and control equipment.
KEV status: the record has the CISA Known Exploited Vulnerabilities flag set to false, and none of the sources we could read says this is exploited in the wild. That can change, so watch for updates.
Try it yourself
Finding every install is the hard part of this fix. The inventory demo shows how a software inventory answers the question of what is installed and where.
Click through it at your own pace, or open it full screen.
Quick check
Is Easergy Studio 9.4 or later affected?
The advisory lists version 9.3.3 and prior as affected, and says 9.3.4 and later includes the fix.
Does an attacker need to be on the network?
No. The CVSS vector marks the attack as local and requires a low privilege account on the machine.
Sources
- Schneider Electric advisory SEVD-2024-100-01 (fetched): https://download.se.com/files?p_Doc_Ref=SEVD-2024-100-01&p_enDocType=Security+and+Safety+Notice&p_File_Name=SEVD-2024-100-01.pdf
Last reviewed: 19 October 2026.
